CVE-2019-17270

Yachtcontrol through 2019-10-06: It's possible to perform direct Operating System commands as an unauthenticated user via the "/pages/systemcall.php?command=COMMAND" page and parameter, where COMMAND will be executed and returning the results to the client. Affects Yachtcontrol webservers disclos...

Authentication flaw

Yachtcontrol through 2019-10-06: It's possible to perform direct Operating System commands as an unauthenticated user via the "/pages/systemcall.php?command=COMMAND" page and parameter, where COMMAND will be executed and returning the results to the client. Affects Yachtcontrol webservers disclos...

millennium-leasing.pl XSS vulnerability

Open Bug Bounty ID: OBB-593992 Description| Value ---|--- Affected Website:| millennium-leasing.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

aharoni-leasing.co.il XSS vulnerability

Open Bug Bounty ID: OBB-367655 Description| Value ---|--- Affected Website:| aharoni-leasing.co.il Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

amazonleasing.com XSS vulnerability

Vulnerable URL: https://www.amazonleasing.com/dealer-lease-specials.php?id=493CF46E-540A-93F6-36A9-03DB3F25A426&=Porsche%20Fresno%20Lease%20xss%3Csvg/onload=prompt%27openbugbounty%27%3E&bg-color;=white&font-color;=black&[email protected]=951-973-9470&default-tax-rate;=7.75 Details:...

Load Balancing and Monitoring Delivery Controllers

This article describes how to load balance the Desktop Delivery Controller via NetScaler with Connection Leasing...

Sixt Leasing - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Sixt Leasing published at the 'play' market has multiple vulnerabilities...

FAQ: Connection Leasing in XenApp/XenDesktop 7.6

Q: What is Connection leasing? A: It allows users to connect to recently used published applications or desktops launchedwithin the last 2 weeks or less during a site database failure using a combination of a license lease and cached information on the Delivery Controllers. The Delivery...

Potential Security Concerns in Comcast Hotspot Class-Action

Cable and Internet service conglomerate Comcast is facing a class-action lawsuit stemming from its use of customer routers as personal home Wi-Fi networks as well as public-facing wireless hotspots available for other Comcast-Xfinity customers. Toyer Grear and Jocelyn Harris, themselves and on...

Real Estates Property CMS 2012 - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== Real Estates Property CMS 2012 - Multiple Web Vulnerabilities Introduction: ============= Real Estate property is an online real-estate service committed to helping you make wise and profitable decisions related to buying, sellin...

Accomplease Leasing Software SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== Accomplease Leasing Software SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0...